An update for openvswitch is now available for Red Hat OpenStack Platform8.0 (Liberty).

Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat OpenStack Platform 8.0 (Liberty) - noarch, x86_64

3. Description:

Open vSwitch provides standard network bridging functions and support forthe OpenFlow protocol for remote per-flow control of traffic.

Security Fix(es):

* An unsigned integer wrap around that led to a buffer over-read was foundwhen parsing OFPT_QUEUE_GET_CONFIG_REPLY messages in Open vSwitch (OvS). Anattacker could use this issue to cause a remote denial of service attack.(CVE-2017-9214)

* While parsing an OpenFlow role status message Open vSwitch (OvS), a callto the abort() function for undefined role status reasons in the function'ofp_print_role_status_message' in 'lib/ofp-print.c' could be misused for aremote denial of service attack by a malicious switch. (CVE-2017-9263)

* A buffer over-read issue was found in Open vSwitch (OvS) which emergedwhile parsing the GroupMod OpenFlow messages sent from the controller. Theissue could enable an attacker to cause a denial of service type of attack.(CVE-2017-9265)

4. Solution:

For details on how to apply this update, which includes the changesdescribed in this advisory, refer to: